Remote Access Trojan

VenomRAT - ClientAny.exe

Author

Moise Medici

Updated

15 Nov 2025 · Completed

Difficulty

Easy

Platform

Windows

Family

VenomRAT

Languages

C#

MITRE

T1059.003 (Command and Scripting Interpreter: Windows Command Shell) T1053.005 (Scheduled Task/Job: Scheduled Task) T1547.001 (Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder) T1027.011 (Obfuscated Files or Information: Fileless Storage) T1027.013 (Obfuscated Files or Information: Encrypted/Encoded File) T1070.004 (Indicator Removal: File Deletion) T1140 (Deobfuscate/Decode Files or Information) T1480.002 (Execution Guardrails: Mutual Exclusion) T1564.003 (Hide Artifacts: Hidden Window) T1620 (Reflective Code Loading) T1010 (Application Window Discovery) T1033 (System Owner/User Discovery) T1057 (Process Discovery) T1082 (System Information Discovery) T1120 (Peripheral Device Discovery) T1518 (Software Discovery) T1518.001 (Software Discovery: Security Software Discovery) T1056.001 (Input Capture: Keylogging) T1074.001 (Data Staged: Local Data Staging) T1095 (Non-Application Layer Protocol) T1102.001 (Web Service: Dead Drop Resolver) T1105 (Ingress Tool Transfer) T1573.002 (Encrypted Channel: Asymmetric Cryptography) T1041 (Exfiltration Over C2 Channel)